GAO

Several DOD IT programs still don’t have a cyber strategy, watchdog finds

Cyber strategy requirements in the Defense Department’s IT business unit date back to at least 2014. A government watchdog thinks it's time for an update.

DOD, VA need more data on how their toxic exposure tracking app is used, watchdog says

A report from the Government Accountability Office found that oversight of the joint system for centralizing toxic exposure records has fallen off, despite a growing influx of PACT Act-related claims.

DOD’s new EHR faces low user satisfaction and integration challenges, watchdog finds

A GAO report found that “integration opportunities remain” at the joint DOD and VA rollout of their modernized EHR systems at the Captain James A. Lovell Federal Health Care Center last month.

Atlassian vulnerability linked to GAO data breach, CGI Federal says

CISA issued an alert on the vulnerability impacting the Atlassian tool in October of last year.

Some 6,600 current, former employees impacted in January GAO data breach

The breach, which also included some companies doing business with GAO, may further galvanize concerns about the federal government’s ability to defend itself from cyber intrusions.

DHS inventory of AI systems for cybersecurity is ‘not accurate’, oversight report says

The report calls on the DHS to better verify its AI inventory submissions and for CISA to develop AI cybersecurity progress metrics.

Agencies are losing out on software savings, GAO finds

Agencies don’t have the right data and aren’t always checking to make sure they’re not over- or under-purchasing software licenses, according to a new Government Accountability Office report.

GSA, OMB lag on FedRAMP improvements, GAO finds

The congressional watchdog wants agencies to streamline the cloud approval process.

State's cyber bureau has ‘raised the U.S. profile on cyber globally,’ watchdog says

The Government Accountability Office said the creation of the Bureau of Cyberspace and Digital Policy in 2022 has “helped to better position State to achieve its cyber diplomacy goals.”

Agencies’ FISMA implementation is still ‘mostly ineffective,’ watchdog says

The Government Accountability Office found that less than half of surveyed federal agencies had compliant security programs and called for improved performance metrics.

TMF’s planned cost savings have been ‘minimal’ in reality, GAO finds

The original intent of the revolving fund anticipated repayments on finished projects replenishing the pool for new ones. In reality, such repayments have been slow and slim.

Agencies have over 1,200 AI uses planned or in operation, watchdog finds

The massive GAO report found that some agencies — like NASA and the Department of Commerce — have made major investments in artificial intelligence, while others struggled to meet federal requirements.

GAO to release landmark AI report

The report provides a baseline for the use of artificial intelligence across major non-defense federal agencies and how they are meeting existing requirements.

20 federal agencies miss deadline for implementing cyber incident tracking requirements, watchdog says

The Government Accountability Office found that just three federal agencies were in compliance with the Office of Management and Budget’s advanced cyber event logging requirements.

GAO urges EPA to make a plan for its ‘difficult’ and ‘outdated’ air quality IT systems

The systems in question are each nearly 30 years old and can be "difficult to maintain, access and use."

DHS should assess the benefits of a risk management sharing tool, GAO says

A new report found that the department’s guidance for risk management practices in acquisition programs isn’t specific enough for all programs and could be helped by information-sharing tools.